Detection Engineer (SIEM/SOAR)

Description

Dragonfli Group is a cybersecurity and IT consulting firm providing services to federal agencies and Fortune 100 enterprises. Headquartered in Washington, DC, Dragonfli supports clients in securing mission-critical systems across on-site, hybrid, and fully remote environments.

We are seeking a Cyber Threat Analyst to join the Detection and Automation Engineering (DAE) program within the security operations organization of a large federal agency. In this role you will design, implement, and maintain automated and AI-driven security detection and integration capabilities across enterprise security monitoring technologies. You will turn operational security needs into working detections and workflows, using SIEM, EDR, SOAR, and threat intelligence platforms (including Splunk Enterprise Security, Splunk SOAR, and SentinelOne), and Python, PowerShell, and Bash. You will work closely with SOC, threat intelligence, and incident response teams, and your documentation and operationalization discipline will keep detections reliable over time. The role calls for 8+ years of relevant cybersecurity experience in detection engineering, security operations, or a closely related field.